Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.mft
File: kr0ltrnzz-B4X_1OXlQCgztKT40.mft (raw, json)
Hash identifier: 5HLSBWKcCqH8kSb8hH3sfEBC5HJNzhXqBjUFjPrAzhg=
Subject key identifier: 03:58:F6:DB:86:FC:71:AC:EA:E2:AF:CD:A9:6A:FB:71:8C:C8:10:73
Authority key identifier: 92:BD:25:B6:B9:F3:CF:E0:78:5F:FD:4E:5E:54:02:83:3B:4A:4F:8D
Certificate issuer: /CN=92bd25b6b9f3cfe0785ffd4e5e5402833b4a4f8d
Certificate serial: 0194BD4E3B075B45E8D039887EA6E5BC11E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr0ltrnzz-B4X_1OXlQCgztKT40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:08 +0000
Manifest this update: Fri 31 Jan 2025 17:00:08 +0000
Manifest next update: Sat 01 Feb 2025 17:00:08 +0000
Files and hashes: 1: bOAoo9Xlbcl-PK-rbfwF58rAKlc.roa (hash: Vn8yXcKwSTNwIZccCZWqjun9GvkjZC8dYUcNBhWRmco=)
2: kr0ltrnzz-B4X_1OXlQCgztKT40.crl (hash: ETHsM5M7eTwkPSiYTTu5IlLxLBw6bDzObdE4XeYY4lo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:3b:07:5b:45:e8:d0:39:88:7e:a6:e5:bc:11:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92bd25b6b9f3cfe0785ffd4e5e5402833b4a4f8d
Validity
Not Before: Jan 31 17:00:08 2025 GMT
Not After : Feb 1 17:00:08 2025 GMT
Subject: CN=0358f6db86fc71aceae2afcda96afb718cc81073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:df:82:27:f4:22:72:d0:1d:74:a0:df:f1:dc:
3a:9d:77:0f:b2:8e:e0:d5:6d:b6:5d:d2:ee:0a:83:
86:be:1d:ba:b1:b7:d3:66:e3:3e:85:16:b3:8d:ea:
90:4d:a2:c2:91:63:67:f8:60:59:45:a0:96:1b:5e:
d2:d3:3e:63:7f:a3:3e:bf:cb:14:01:0c:95:71:a2:
de:87:5d:55:a6:08:61:67:da:22:8a:89:53:08:90:
44:75:8a:e7:f4:45:6c:d1:61:f7:b1:d2:2d:0f:c5:
06:43:80:ed:7c:11:82:b3:c8:67:fa:ba:9e:49:93:
1f:af:00:fa:dd:b4:7a:28:d5:94:47:47:f8:e4:32:
cb:4c:69:ac:fc:0b:81:cd:cd:d4:65:7b:04:6f:c4:
c0:fe:3e:3c:4c:c0:bc:d1:0b:1d:61:e6:d3:77:7b:
21:ef:d5:0e:0c:30:d7:b3:a4:6f:66:26:2b:1e:a4:
80:1e:aa:dd:e2:48:f2:2c:21:c2:fd:ac:b7:95:16:
79:53:4f:fd:d6:4d:43:dd:f6:a6:5a:ae:b0:5c:ce:
b6:a3:43:2d:0e:cc:35:a9:45:a3:6e:69:57:fd:c3:
8b:45:05:cf:06:64:84:3b:c3:ec:08:e8:6b:18:44:
23:10:b9:d6:40:91:a9:e0:27:e9:33:d8:9e:99:b0:
2d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:58:F6:DB:86:FC:71:AC:EA:E2:AF:CD:A9:6A:FB:71:8C:C8:10:73
X509v3 Authority Key Identifier:
keyid:92:BD:25:B6:B9:F3:CF:E0:78:5F:FD:4E:5E:54:02:83:3B:4A:4F:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr0ltrnzz-B4X_1OXlQCgztKT40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:df:51:1f:95:17:d8:be:81:af:c1:8c:03:34:a4:f0:4e:5d:
c2:4c:a4:e6:0c:b6:7c:0b:63:9c:76:a4:c1:c8:da:0d:e2:d7:
af:87:2e:72:5c:84:5c:dd:f0:b7:c9:64:a6:8e:61:e9:3c:b2:
e8:e6:49:ed:7c:84:15:d2:10:db:92:15:5d:f3:2d:08:c8:b3:
51:ee:55:12:30:59:6c:6b:23:45:b3:cf:29:37:3f:18:6a:da:
7d:26:98:e4:ae:9f:39:27:42:1d:1d:00:10:8a:e7:b9:11:0d:
43:e0:f1:a8:11:3b:33:07:df:69:43:6a:78:db:ce:7c:c6:9d:
1e:a2:88:9d:8f:a6:c1:04:7b:9f:d1:bc:b9:2a:08:6e:97:c6:
53:45:ff:f3:e6:34:bf:d1:17:99:75:ee:1e:bb:ca:76:f5:1d:
74:22:8a:c1:da:50:64:f4:ab:70:33:93:2e:c9:a1:a3:f4:03:
1f:41:81:4c:52:33:31:30:23:64:f6:0f:05:b5:f9:99:16:17:
42:97:78:27:ab:37:38:39:fe:87:39:30:16:13:a4:63:fd:d9:
cf:dd:dd:dd:30:f2:34:ba:44:2e:6a:e7:ab:89:ee:9b:de:c7:
1b:ca:a6:3d:a5:44:c1:f8:f7:b2:fa:cd:26:98:aa:a1:30:40:
55:4c:7f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:49:18 2025 by rpki-client